lua-l archive

Search lua-l

This index contains 143,615 documents and 1,774,615 keywords. Last update on 2023-03-09 .

101. Re: Sandboxing a module that clutters the global environment (score: 33)

Author: Thijs Schreijer <thijs@...>

Date: Wed, 5 Oct 2016 19:32:41 +0000

The proper way to do singletons (imo) would be to store state in module level upvalues. These are fairly easy to work around by clearing the module from the `package.loaded` table. Something like th

102. Re: Sandboxing a module that clutters the global environment (score: 33)

Author: "Soni L." <fakedme@...>

Date: Wed, 5 Oct 2016 10:32:47 -0300

I have a 3rd party module that operates and maintains its state in the global environment. Is there anyway I can load this module into a custom context table, so that it uses that table as its _G? I

103. Sandboxing a module that clutters the global environment (score: 33)

Author: tyrondis <tyrondis@...>

Date: Thu, 06 Oct 2016 00:31:02 +1100

Hi *, I have a 3rd party module that operates and maintains its state in the global environment. Is there anyway I can load this module into a custom context table, so that it uses that table as its

104. Re: Perhaps I messed up my lua installation on my iMac? (score: 2)

Author: Aapo Talvensaari <aapo.talvensaari@...>

Date: Tue, 23 Aug 2016 22:45:41 +0300

On 23 August 2016 at 20:24, Peter Aronoff <telemachus@arpinum.org> wrote: If I were you, I would probably look into installing and using Homebrew (http://brew.sh). I have kinda hate, and less love re

105. Re: Loading bytecode in require() (score: 3)

Author: Egor Skriptunoff <egor.skriptunoff@...>

Date: Mon, 20 Jul 2015 01:26:18 +0300

On Sun, Jul 19, 2015 at 10:15 PM, Tom N Harris <whoopdedo@whoopdedo.org> wrote: Require is assumed to be operating on trusted code so there's no need for safeguards. It is not typical for user-suppli

106. Re: Loading bytecode in require() (score: 2)

Author: Tom N Harris <whoopdedo@...>

Date: Sun, 19 Jul 2015 15:15:59 -0400

As was mentioned, you can put a custom function in package.searchers that will reject untrusted files. The third and fourth default searcher handles native libraries, so to reject those just set `pac

107. Re: disallow interaction with "outside world" (score: 2)

Author: Nagaev Boris <bnagaev@...>

Date: Thu, 2 Jul 2015 09:17:48 +0000

Please try this code under Lua and LuaJIT: $ cat dos.lua debug.sethook(function() print 'hook' end, "", 1e3) while true do end $ lua dos.lua hook hook hook ... ^C $ luajit dos.lua <prints nothing> T

108. Re: disallow interaction with "outside world" (score: 2)

Author: Etiene Dalcol <dalcol@...>

Date: Thu, 2 Jul 2015 11:04:26 +0200

2015-07-02 8:17 GMT+02:00 Dirk Laurie <dirk.laurie@gmail.com>: 2015-07-01 22:00 GMT+02:00 Nathan Hüsken <nathan.huesken@posteo.de>: Enthusiasm for _javascript_ is not prevalent on this list. Not so f

109. Re: disallow interaction with "outside world" (score: 4)

Author: Rena <hyperhacker@...>

Date: Thu, 2 Jul 2015 04:56:40 -0400

I'd be surprised if "while true do end" can break debug hooks, since it's not making any C calls. Any time you make a C function available though (such as string.rep) you have to watch out that the u

110. Re: disallow interaction with "outside world" (score: 4)

Author: Nagaev Boris <bnagaev@...>

Date: Thu, 2 Jul 2015 07:16:36 +0000

(Unrelated) You can find several Lua implementations in JavaScript and other cool Lua software [1]. With sandboxing, you can start from [2]. Most difficult things are isolating 'string' metatable (ot

111. Re: disallow interaction with "outside world" (score: 2)

Author: Dirk Laurie <dirk.laurie@...>

Date: Thu, 2 Jul 2015 08:17:58 +0200

2015-07-01 22:00 GMT+02:00 Nathan Hüsken <nathan.huesken@posteo.de>: Enthusiasm for Javascript is not prevalent on this list.

112. Re: disallow interaction with "outside world" (score: 3)

Author: Nathan Hüsken <nathan.huesken@...>

Date: Wed, 01 Jul 2015 22:00:29 +0200

Ok, cool. That is exactly what I am looking for! I might also be targeting the browser. Does sandboxing also work with an javascript interpreter like moonshine? I am wondering because as far as I can

113. Re: disallow interaction with "outside world" (score: 2)

Author: Ignacio Burgueño <iburgueno@...>

Date: Wed, 1 Jul 2015 16:37:33 -0300

On Wed, Jul 1, 2015 at 4:27 PM, Nathan Hüsken <nathan.huesken@posteo.de> wrote: Dear Lua community, I am completely new to lua (not to programming) and also to this community, so hello everyone :-).

114. Re: Simulating Lua states in Lua with only 250 lines of code (score: 2)

Author: Sean Conner <sean@...>

Date: Sat, 27 Jun 2015 00:00:49 -0400

It was thus said that the Great Soni L. once stated: I was going for a straight Lua translation of the C API (which is what a lot of people appear to do instead of a more Luaish approach when wrappin

115. Re: Simulating Lua states in Lua with only 250 lines of code (score: 2)

Author: Rena <hyperhacker@...>

Date: Fri, 26 Jun 2015 22:05:41 -0400

It is an interesting point. I've more than a few times wished some C API functionality were exposed to Lua code. (Or vice-versa. I mean, sure I can look up the global string, then the field gsub, and

116. Re: Simulating Lua states in Lua with only 250 lines of code (score: 2)

Author: Tim Hill <drtimhill@...>

Date: Fri, 26 Jun 2015 18:39:53 -0700

Sure looks like Lua to me. But you?re not talking about using all of Lua?s features, you?re talking about EXTENDING Lua .. and to extend C you very well MIGHT need to code up some assembly language

117. Re: Simulating Lua states in Lua with only 250 lines of code (score: 2)

Author: "Soni L." <fakedme@...>

Date: Fri, 26 Jun 2015 22:22:06 -0300

On 26/06/15 07:27 PM, Sean Conner wrote: It was thus said that the Great Soni L. once stated: Lua States (from C) work well for sandboxing. I don't see why we SHOULDN'T have them available as corouti

118. Re: Simulating Lua states in Lua with only 250 lines of code (score: 2)

Author: Sean Conner <sean@...>

Date: Fri, 26 Jun 2015 18:27:37 -0400

It was thus said that the Great Soni L. once stated: Then wrap Lua up into a module: lua = require "lua" L = lua.Lnewstate() L:gc('stop') L:Lopenlibs() L:gc('start') ... -spc (Or instead of the entir

119. Re: Simulating Lua states in Lua with only 250 lines of code (score: 3)

Author: "Soni L." <fakedme@...>

Date: Fri, 26 Jun 2015 13:42:02 -0300

You can't get enclosing closures. function f() -- _ENV = _ENV -- redundant because we're making g a global, so we need _ENV function g() (""):doSomething() end -- function has no _ENV end -- good luc

120. Re: Simulating Lua states in Lua with only 250 lines of code (score: 2)

Author: Tim Hill <drtimhill@...>

Date: Fri, 26 Jun 2015 02:23:10 -0700

It doesn?t and it wasn?t intended to. If you need to sandbox Lua functions you need a different approach. ?Tim